Move OWASP scanner into scanner/ subdirectory + add workflow

[lperry022]

• Moved scanner into scanner/ as requested
• Added GitHub Actions workflow (.github/workflows/owasp-scanner.yml) to run scanner on PRs
• Ignored venv

[github-actions]

🔒 Security Scan Results

🔒 Security Scan Results
=========================

Bandit Scan Results:
-------------------
Run started:2025-09-17 08:55:24.939133

Test results:
	No issues identified.

Code scanned:
	Total lines of code: 1980
	Total lines skipped (#nosec): 0
	Total potential issues skipped due to specifically being disabled (e.g., #nosec BXXX): 1

Run metrics:
	Total issues (by severity):
		Undefined: 0
		Low: 13
		Medium: 0
		High: 0
	Total issues (by confidence):
		Undefined: 0
		Low: 0
		Medium: 0
		High: 13
Files skipped (1):
	./T1_2025/infra/backups/bak/controller/backend/v1.0.0/endpoints/register.py (syntax error while parsing AST from file)

✅ No critical security issues detected.

The code has passed all critical security checks.

[ben-AI-cybersec]

lgtm